Re: Deplyoing the component in security enabledsmartfrog Daemon

Hi Julio,
	Thanks for the reply, now I can deploy the components in
security mode. 

	But I getting one more problem while deploying a component whole
.sf file in localdirectory not in jar file. Details are as below.
==================================
#/opt/iexpress/smartfrog/bin/security/smartfrog  -a
counterEx:DEPLOY:/opt/iexpress/smartfrog/ambika/array.sf::localhost: -e

 - FAILED when trying DEPLOY of 'counterEx',
[/opt/iexpress/smartfrog/ambika/array.sf],  host:localhost
    Result:
      * Exception: 'SmartFrogDeploymentException: unnamed component.
deploying description '/opt/iexpress/smartfrog/ambika/array.sf' for
'counterEx'
         cause: SmartFrogResolutionException:: Error creating parser for
'/opt/iexpress/smartfrog/ambika/array.sf'. Parser error
[SmartFrogParseException:: Unable to locate URL
"/opt/iexpress/smartfrog/ambika/array.sf"
    Reason: URL may be incorrect or resource is missing]
         deployedContext: included'
      * Command line SFACT:
'counterEx:DEPLOY:/opt/iexpress/smartfrog/ambika/array.sf::localhost:'
      * To String: ' name:counterEx,  type:DEPLOY,
url:/opt/iexpress/smartfrog/ambika/array.sf,  host:localhost,
resultType:FAILED,  resultExceptionMessage:unnamed component. deploying
description '/opt/iexpress/smartfrog/ambika/array.sf' for 'counterEx''
====================================
	
	I need to keep that array.sf file in a jar file and export that
in CLASSPATH?

Thanks and Regards,
Ambika

-----Original Message-----
From: Guijarro, Julio 
Sent: Tuesday, September 05, 2006 9:04 PM
To: Shrishailappa Awanty, Ambika (STSD)
Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'; Gururaja, Grandhi
(STSD)
Subject: RE: [Smartfrog-developer] Deplyoing the component in security
enabledsmartfrog Daemon

The steps should be:

=============================
  * ant initCA : creates a new Certificate Authority for siging jars and
generating the credentials ---> Only once!

  * mkdir  signedLib

  *  ant signJars :signs the jar files and populates the dist/signedLib
dir. Only once (and copy jars to all daemons).

  *  ant newDaemon : creates new host credentials This will generate the
host credentials in  <smartfrog-installation-dir>/dist/private/hostxxx>
directory.

  *  Rename the generated directory
   /opt/iexpress/smartfrog/private/hostxxx to
   /opt/iexpress/smartfrog/private/host1.

  *  ant newDaemon : creates 2nd new host credentials This will generate
the host credentials in
<smartfrog-installation-dir>/dist/private/hostxxx> directory.
  *  copy the generated directory to 2nd machine:
   /opt/iexpress/smartfrog/private/hostxxx to
   <2nd host>/opt/iexpress/smartfrog/private/host1.
  *  copy the dist/signedLib  directory to 2nd machine in dist/signedLib

  * start Daemon 2
  * start Daemon 1
  * deploy application.


NOTE: I forgot to mention that if you don't use dynamic classloading you
need to have all the jar files signed by the same certificate authority.

- Daemon credentials = daemon identity and each host has a unique one
signed by the same CA.
- Signed jars = all signed by the same CA that signed the daemons
identity. Same jars for all the daemons or jar in only one place and
classes downloaded dynamically in the other participating daemons.

Regards,

Julio

=======================

> -----Original Message-----
> From: Shrishailappa Awanty, Ambika (STSD)
> Sent: 05 September 2006 14:47
> To: Guijarro, Julio
> Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'; Gururaja, Grandhi 
> (STSD)
> Subject: RE: [Smartfrog-developer] Deplyoing the component in security

> enabledsmartfrog Daemon
> 
> Hi Julio,
> 	I have create different certificates on each system before.
> 	Now as you said now I have created only one cirtificate and
copied to 
> other machine.
> 	When I run sfDaemon in secure mode on other machine its giving 
> following error.
> ===================================
> Exception in thread "main" java.lang.ExceptionInInitializerError
at
> org.smartfrog.sfcore.componentdescription.ComponentDescriptionImpl.get
> Clas
> sComponentDescription(ComponentDescriptionImpl.java:1055)
> at
> org.smartfrog.sfcore.componentdescription.ComponentDescriptionImpl.get
> Clas
> sComponentDescription(ComponentDescriptionImpl.java:1033)
>         at
org.smartfrog.sfcore.logging.LogImpl.<init>(LogImpl.java:154)
>         at
> org.smartfrog.sfcore.logging.LogFactory.getLog(LogFactory.java:66)
>         at
> org.smartfrog.sfcore.logging.LogFactory.sfGetProcessLog(LogFactory.jav
> a:13
> 6)
>         at org.smartfrog.SFSystem.sfLog(SFSystem.java:530)
>         at org.smartfrog.SFSystem.execute(SFSystem.java:324)
>         at org.smartfrog.SFSystem.main(SFSystem.java:309)
> Caused by: java.security.AccessControlException: access denied 
> (java.util.PropertyPermission org.smartfrog.Reference.initCap read) 
> ==============================
> 
> 	Please can you send me the list of steps to be executed in other

> machine where I didn't created any new cirtificates.
> 
> Thanks and Regards,
> Ambika
> 
> -----Original Message-----
> From: Guijarro, Julio
> Sent: Tuesday, September 05, 2006 6:53 PM
> To: Shrishailappa Awanty, Ambika (STSD)
> Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'
> Subject: RE: [Smartfrog-developer] Deplyoing the component in security

> enabledsmartfrog Daemon
> 
> Hi Ambika,
> 
> Are you running iniCA in both machines? If you do that, then you are 
> creating to different Certifacate Authorities or two domains. All the 
> daemons have to share the same CA if they are part of the same domain.
> 
> What you need to do is to create only one CA in one of the machines, 
> run "ant newDaemon" twice and copy one of the private/hostxxx to the 
> other machine with dir name private/host1.
> 
> Then it should work. Let me know if you are already doing this and it 
> is still not working for you.
> 
> Julio
> 
> > -----Original Message-----
> > From: Shrishailappa Awanty, Ambika (STSD)
> > Sent: 05 September 2006 14:08
> > To: Guijarro, Julio
> > Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'
> > Subject: RE: [Smartfrog-developer] Deplyoing the component in 
> > security enabledsmartfrog Daemon
> >
> > Hi Julio,
> > 	I have created the certificates for both the daemons using the 
> > following steps.
> > =============================
> >     * ant initCA : creates a new Certificate Authority for siging 
> > jars and generating the credentials
> >     * mkdir  signedLib
> >     *  ant signJars :signs the jar files and populates the 
> > dist/signedLib dir.
> >     *  ant newDaemon : creates new host credentials This will 
> > generate the host credentials in 
> > <smartfrog-installation-dir>/dist/private/hostxxx
> > directory.
> >     *  Rename the generated directory
> > 	/opt/iexpress/smartfrog/private/hostxxx to 
> > /opt/iexpress/smartfrog/private/host1.
> > =======================
> >
> > 		Then I started the daemons in security mode.
> >
> > Thanks and Regards,
> > Ambika
> >
> > -----Original Message-----
> > From: Guijarro, Julio
> > Sent: Tuesday, September 05, 2006 6:36 PM
> > To: Shrishailappa Awanty, Ambika (STSD)
> > Cc: smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > Subject: RE: [Smartfrog-developer] Deplyoing the component in 
> > security enabledsmartfrog Daemon
> >
> > Hi Ambika,
> >
> > Did you create a set of certificates for the two daemons or are you 
> > using the dummy ones?
> >
> > Did you start each daemon with its own certificate?
> >
> > Julio
> >
> > > -----Original Message-----
> > > From: smartfrog-developer-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > > [mailto:smartfrog- developer-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org] On 
> > > Behalf Of Shrishailappa Awanty, Ambika (STSD)
> > > Sent: 05 September 2006 13:24
> > > Cc: smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > > Subject: [Smartfrog-developer] Deplyoing the component in security

> > > enabledsmartfrog Daemon
> > >
> > > Hi ,
> > > 	I am trying to deploy the counter example on two different
> > > nodes(HUPX) where I have started samrtfrog daemon in security 
> > > enabled mode. But its failing to depoly the counter example on
> different node.
> > > I am getting following error.
> > >
> > >
> > > # ./smartfrog -a
> > >
counterEx1:DEPLOY:org/smartfrog/examples/functions/function.sf::imp:
> > > -e SmartFrog 3.08.004
> > > (C) Copyright 1998-2005 Hewlett-Packard Development Company, LP
> > >  - FAILED when trying DEPLOY of 'counterEx1', 
> > > [org/smartfrog/examples/functions/function.sf],  host:imp
> > >     Result:
> > >       * Exception: 'SmartFrogException:: Unable to connect to 
> > > sfDaemon
> > > on: imp/15.106.122.89.
> > > Reason: sfDaemon may not be authenticated properly
> > >          cause: java.rmi.ConnectIOException: Exception creating 
> > > connection to: 15.106.122.89; nested exception is:
> > >         javax.net.ssl.SSLPeerUnverifiedException: peer not 
> > > authenticated'
> > >       * Command line SFACT:
> > >
'counterEx1:DEPLOY:org/smartfrog/examples/functions/function.sf::imp:'
> > >       * To String: ' name:counterEx1,  type:DEPLOY, 
> > > url:org/smartfrog/examples/functions/function.sf,  host:imp, 
> > > resultType:FAILED,  resultExceptionMessage:Unable to connect to 
> > > sfDaemon
> > > on: imp/15.106.122.89.
> > > Reason: sfDaemon may not be authenticated properly'
> > >
> > > 	Please any one can help me solve this problem?
> > >
> > > Thanks and Regards,
> > > Ambika
> > >
> > > ------------------------------------------------------------------
> > > --
> > > --
> > > --- Using Tomcat but need to do more? Need to support web 
> > > services, security?
> > > Get stuff done quickly with pre-integrated technology to make your

> > > job easier Download IBM WebSphere Application Server v.1.0.1 based

> > > on Apache Geronimo
> > > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=
> > > 12
> > > 16
> > > 42 _______________________________________________
> > > Smartfrog-developer mailing list
> > > Smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > > https://lists.sourceforge.net/lists/listinfo/smartfrog-developer

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642